Privacy Policy for UR Skin Med Spa
Effective Date: July 24, 2025
UR Skin Med Spa is committed to protecting the privacy and security of your personal and health information. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with applicable laws and regulations, including the Health Insurance Portability and Accountability Act (HIPAA) and requirements for A2P (Application-to-Person) messaging registration.
1. Information Collection
UR Skin Med Spa collects various types of information to provide you with high-quality aesthetic and medical spa services. This information may include:
Personal Identifiable Information (PII): Such as your name, address, email address, phone number, date of birth, and demographic information.
Protected Health Information (PHI): This includes medical history, treatment plans, diagnoses, photographs related to treatments, billing information, and other health-related data. This information is collected during consultations, treatments, and through our online forms or patient portals.
Technical and Usage Data: Information about your computer hardware and software, such as your IP address, browser type, domain names, access times, and referring website addresses. This data is automatically collected when you visit our website and is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding the use of the UR Skin Med Spa website.
We collect information through various means, including direct interactions with you (e.g., during appointments, phone calls, or email correspondence), through our website (e.g., online forms, appointment scheduling), and potentially from third-party service providers involved in your care or payment processing.
2. Use of Information
UR Skin Med Spa uses the collected information for various purposes, including but not limited to:
Providing Services: To deliver the aesthetic and medical spa treatments you request, manage your appointments, and provide personalized care.
Communication: To communicate with you regarding your appointments, treatment plans, follow-up care, and to respond to your inquiries. This includes A2P messaging for appointment reminders, confirmations, and other service related notifications, ensuring compliance with A2P registration requirements for legitimate and consented communication.
Internal Operations: For administrative purposes, such as billing, quality improvement, staff training, and business analysis.
Legal and Regulatory Compliance: To comply with applicable laws, regulations, and professional standards, including HIPAA, and to respond to lawful requests from government authorities.
Marketing and Promotions: With your consent, we may use your information to send you promotional materials, special offers, or information about new services. You will always have the option to opt-out of such communications.
Website Improvement: To analyze website usage trends, improve our website's functionality, and enhance user experience.
3. Disclosure of Information
UR Skin Med Spa may disclose your information to third parties under certain circumstances, including:
Treatment, Payment, and Healthcare Operations (TPO): We may share your PHI with other healthcare providers involved in your care, for billing purposes, or for our healthcare operations as permitted by HIPAA.
Business Associates: We may share information with third-party service providers (business associates) who perform functions on our behalf, such as billing companies, IT service providers, or marketing agencies. These business
associates are contractually obligated to protect your information and comply with HIPAA and other applicable privacy laws.
Legal Requirements: We may disclose your information when required by law, such as in response to a subpoena, court order, or other legal process.
Public Health and Safety: We may disclose information to public health authorities for public health activities or to prevent a serious threat to health or safety.
With Your Consent: We may disclose your information to other parties with your explicit written consent.
We will never sell or rent your personal or health information to third parties for their marketing purposes without your explicit consent.
4. Data Security
UR Skin Med Spa is committed to ensuring the security of your information. We implement appropriate physical, technical, and administrative safeguards to protect your personal and health information from unauthorized access, use, disclosure, alteration, or destruction. These safeguards include, but are not limited to:
Encryption: Using encryption technologies to protect data transmitted online.
Access Controls: Restricting access to your information to authorized personnel only.
Regular Audits: Conducting regular security assessments and audits to identify and address potential vulnerabilities.
Staff Training: Training our staff on privacy and security best practices and HIPAA compliance.
Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.
5. Your Privacy Rights
Under HIPAA and other applicable laws, you have certain rights regarding your protected health information, including:
Right to Access: You have the right to inspect and obtain a copy of your PHI.
Right to Amend: You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete.
Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures of your PHI.
Right to Request Restrictions: You have the right to request restrictions on how your PHI is used or disclosed for treatment, payment, or healthcare operations.
Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.
Right to a Paper Copy of this Notice: You have the right to obtain a paper copy of this Privacy Policy upon request.
To exercise any of these rights, please contact us using the contact information provided below.
6. A2P (Application-to-Person) Messaging Registration:
UR Skin Med Spa utilizes A2P messaging services for efficient and timely communication with our clients, primarily for appointment reminders, confirmations, and important service-related updates. To ensure compliance with telecommunication regulations and to maintain high deliverability rates, we adhere to A2P registration requirements. This includes:
Consent: We obtain explicit consent from you before sending any A2P messages. This consent is typically collected during patient registration or appointment scheduling.
Clear Purpose: All A2P messages will have a clear and legitimate purpose related to your services or appointments with UR Skin Med Spa.
Opt-Out Mechanism: Every A2P message will include a clear and easy-to-use opt-out mechanism (e.g., 'STOP' to unsubscribe) to allow you to discontinue receiving messages at any time.
Data Minimization: We only use the necessary personal information (e.g., phone number) for A2P messaging purposes.
Your privacy and preferences regarding communication are paramount, and we are committed to maintaining compliance with all A2P messaging guidelines.
7. Changes to This Privacy Policy
UR Skin Med Spa reserves the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by posting the new Privacy Policy on our website with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
8. Contact Information
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
UR Skin Med Spa (470) 748-0515 [email protected] Website: https://urskinmedspa.com/
Address: 6500 Roswell Rd Suite 6597-F, Sandy Springs, GA 30328
UR Skin Med Spa Confidence Starts with Care
Call: (470) 748-0515
Facebook
Instagram